ph956 Privacy Policy

This Privacy Policy is issued by the operator of the ph956 online gaming platform, accessible at ph956.org ("ph956", "we", "us", "our"). ph956 is the data controller responsible for personal data collected through the Platform and processed in connection with the provision of our online casino and sports betting services to users in the Philippines.

ph956 operates under the regulatory oversight of PAGCOR (Philippine Amusement and Gaming Corporation) and is subject to the data protection requirements of Philippine Republic Act No. 10173 (Data Privacy Act of 2012) and the implementing rules issued by the National Privacy Commission.

ph956 collects the following categories of personal data in connection with account registration, KYC verification, payment processing, and Platform usage:

2.1 Identity Data

• Full legal name as it appears on a valid Philippine government-issued ID.
• Date of birth (to verify compliance with the 21+ age requirement).
• Nationality and country of residence.
• Government ID number (e.g., passport number, driver's license number, UMID number).
• Copies of valid Philippine identification documents submitted for KYC.

2.2 Contact Data

• Email address registered with your ph956 Account.
• Philippine mobile number registered with your Account.
• Residential address (province, city/municipality, barangay, street) as submitted during KYC.

2.3 Financial Data

• GCash number, PayMaya number, or bank account details used for deposits and withdrawals.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment methods.
• Account balance and bonus balance information.

2.4 Technical & Usage Data

• IP address and approximate geolocation at the time of login and gameplay.
• Device type, operating system, browser type and version.
• Session duration, pages viewed, games accessed, and betting activity logs.
• Login timestamps and authentication records.

2.5 Communications Data

• Records of communications between you and ph956 customer support, including live chat transcripts and email correspondence.
• Responsible gaming tool elections (deposit limits, self-exclusion requests, etc.).

ph956 collects personal data through the following means:

• Direct collection: Data you provide directly when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or using responsible gaming tools.
• Automated collection: Technical and usage data automatically collected by our Platform systems when you access, browse, or interact with ph956, including through cookies and server logs.
• Third-party sources: Identity verification data from KYC service providers; payment confirmation data from GCash, PayMaya, and banking partners; fraud detection signals from security service providers.

ph956 uses personal data for the following purposes:

• To create, verify, maintain, and manage your ph956 Account.
• To verify your identity and age as required by PAGCOR regulations and Philippine anti-money laundering laws.
• To process deposits, withdrawals, and bonus credit transactions in Philippine Peso.
• To provide the games, services, and features available on the ph956 Platform.
• To detect, investigate, and prevent fraud, money laundering, unauthorized account access, and other prohibited conduct.
• To communicate with you regarding your Account, transactions, Platform changes, and support queries.
• To administer responsible gaming tools including deposit limits, loss limits, and self-exclusion.
• To comply with PAGCOR regulatory requirements and mandatory reporting obligations under Philippine law.
• To analyze Platform usage patterns and improve our services — using aggregated or anonymized data where possible.
• To send promotional communications about ph956 offers — only where you have given explicit consent and subject to easy opt-out at any time.

ph956 processes personal data on the following legal grounds under RA 10173:

• Contractual necessity: Processing required to perform the agreement between ph956 and you as a registered player, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement — balanced against your privacy rights.
• Consent: Processing for direct marketing communications, where your explicit consent has been obtained and can be withdrawn at any time.

ph956 uses cookies and similar technologies (session tokens, local storage) to deliver and secure the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Required for Platform operation, user authentication, and security. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Remember your preferences such as language settings and session choices to improve your experience across visits.
• Analytics cookies: Collect anonymized data about how players use the Platform (pages visited, session duration) to help us improve performance. No personally identifiable data is transmitted to external analytics services.

ph956 does not use third-party advertising or behavioral tracking cookies. You can control cookie settings through your browser; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

ph956 does not sell personal data. We share personal data only in the following circumstances:

• PAGCOR and Philippine regulatory authorities: As required by our gaming licence and applicable law, including mandatory reporting to the Anti-Money Laundering Council (AMLC).
• KYC and identity verification providers: To verify the identity and age of registered players. These providers are contractually bound to process data solely for this purpose.
• Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process deposits and withdrawals. Each provider operates under its own privacy policy.
• Game providers: Including Evolution Gaming for live dealer content. Game providers receive only the minimum data required to deliver the game session (e.g., session token, bet data).
• Fraud prevention and security providers: Who assist in detecting and preventing unauthorized account access and fraudulent transactions.
• Law enforcement and courts: Where ph956 is compelled by a valid legal order, warrant, or court judgment issued by a competent Philippine authority.

All third-party data processors engaged by ph956 are required by contract to: (a) process data only on ph956's documented instructions; (b) implement appropriate technical and organizational security measures; and (c) not engage sub-processors without ph956's prior written approval.

Where ph956 engages service providers whose infrastructure is located outside the Philippines (for example, cloud hosting or game provider servers), any transfer of personal data outside Philippine jurisdiction is conducted only where adequate safeguards are in place, including data processing agreements incorporating standard contractual clauses as recognized under RA 10173 and NPC guidelines.

ph956 does not transfer your personal data to jurisdictions without adequate data protection frameworks without implementing appropriate contractual protections.

ph956 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Account data: Retained for the duration of your Account registration plus five (5) years after Account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• KYC documents: Retained for five (5) years after Account closure unless a longer retention period is required by applicable law or ongoing regulatory proceedings.
• Customer support communications: Retained for three (3) years from the date of the communication unless related to an ongoing dispute.
• Technical logs: Retained for twelve (12) months for security and fraud investigation purposes, then deleted or anonymized.

When personal data is no longer required for any lawful purpose, ph956 will securely delete or anonymize it in accordance with our internal data disposal procedures.

Under the Philippine Data Privacy Act (RA 10173), you have the following rights regarding your personal data held by ph956:

• Right to be informed: To know whether ph956 processes personal data about you and to receive clear information about how it is processed.
• Right of access: To obtain a copy of the personal data ph956 holds about you and information about how it is processed.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to object: To object to specific processing activities, including direct marketing communications.
• Right to data portability: To receive your personal data in a structured, commonly used, machine-readable format.
• Right to file a complaint: To lodge a complaint with the National Privacy Commission (NPC) if you believe ph956 has violated your data privacy rights.

To exercise any of these rights, please contact ph956's Data Protection Officer using the contact details in Section 14. We will respond to data subject requests within fifteen (15) business days of receipt.

ph956 implements a comprehensive information security program that includes the following technical and organizational measures:

• AES-256 encryption for stored personal and financial data.
• TLS 1.2 / 1.3 encryption for all data in transit between your device and ph956 servers.
• Multi-factor authentication for all administrative access to systems containing personal data.
• Role-based access control limiting employee access to personal data on a need-to-know basis.
• Regular penetration testing and security audits by qualified third-party security professionals.
• A documented data breach response plan with notification procedures aligned with NPC requirements.

In the event of a personal data breach that is likely to give rise to a risk to your rights and freedoms, ph956 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay where required by law.

While ph956 takes all reasonable steps to protect your data, no online transmission or storage system is completely impenetrable. You are responsible for maintaining the security of your own Account credentials — please see our Terms & Conditions for Account security obligations.

ph956 is strictly a 21+ platform. We do not knowingly collect personal data from individuals under 21 years of age. Our registration process requires age verification and we conduct KYC checks that include date-of-birth verification against government-issued Philippine identification.

If ph956 becomes aware that personal data has been collected from a person below the minimum age, we will immediately terminate that Account, delete the associated personal data (subject to any legally mandated retention requirements), and report the incident to PAGCOR as required. If you are a parent or guardian and believe your child has created a ph956 Account, please contact us immediately using the details in Section 14.

ph956 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. Material changes will be communicated to registered players via the email address on file or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this Policy reflects when the most recent version was published. Your continued use of the ph956 Platform after the effective date of an updated Policy constitutes your acknowledgment of the changes. If you do not agree to the amended Policy, you should discontinue use of the Platform and request Account closure.

ph956 has appointed a Data Protection Officer (DPO) as required under RA 10173. For any questions about this Privacy Policy, to exercise your data subject rights, or to raise a data privacy concern, please contact us:

By email (plain text — not a link): [email protected]

Our customer support team is available twenty-four (24) hours a day, seven (7) days a week via live chat on the Platform. Data subject requests will be escalated to our DPO and handled within fifteen (15) business days.

If you are not satisfied with ph956's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines.